CVE-2018-2499

2019-01-0820:00:00

sap

www.cve.org

0.001 Low

EPSS

Percentile

50.5%

JSON

A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover the password hash of an admin user.

CNA Affected

[
  {
    "product": "SAP Financial Consolidation Cube Designer (BOBJ_EADES)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 8.0"
      },
      {
        "status": "affected",
        "version": "< 10.1"
      }
    ]
  }
]